There could be a slight vulnerability, in which commands and actions could be spoofed.
As the client-server architecture gives a lot of power to the client in BZFlag.
It is to my understanding, the client sends actions (such as jump) to the server which then sends them to other clients(so they would interpret whether a tank has jumped or not, for example).
This technically allows one to send spoofed commands or actions to the server, for example making someone else's tank jump in a bad situation.

Last edited by Zehra on Mon Dec 21, 2015 8:25 pm, edited 2 times in total.

There's this game I love and it's called Ducati. ~ZehraThose who are critical of me, I'll likely be the same of them. ~ZehraThere's always something to remember and it's been a game I love. ~ZehraThe time spent is a time which can never be regained, so it's a time to enjoy. ~ZehraThe decisions we make are the ones we look forward too and the ones we regret. ~ZehraThe details and the skill of knowing and applying them is what excellence is made of. ~ZehraThe best player is the one who knows what to do and when and applies it successfully. ~ZehraThere's a difference between knowing my name and knowing me, one shows respect to my name and the other is to who I am. ~ZehraMy blog is available at zehrahblog.wordpress.com.See when I've last been active atStrayers.

Please analyze the source code or conduct local tests to validate your ideas before you speculate whether a specific attack is possible. The server has numerous checks to validate data it receives from clients before accepting and relaying it. Furthermore, we generally do not allow discussions about specific ways of attacking bzfs servers here, nor any kind of cheating or attempts to compromise the game.

Last edited by Zehra on Wed Jan 04, 2017 3:38 am, edited 1 time in total.

There's this game I love and it's called Ducati. ~ZehraThose who are critical of me, I'll likely be the same of them. ~ZehraThere's always something to remember and it's been a game I love. ~ZehraThe time spent is a time which can never be regained, so it's a time to enjoy. ~ZehraThe decisions we make are the ones we look forward too and the ones we regret. ~ZehraThe details and the skill of knowing and applying them is what excellence is made of. ~ZehraThe best player is the one who knows what to do and when and applies it successfully. ~ZehraThere's a difference between knowing my name and knowing me, one shows respect to my name and the other is to who I am. ~ZehraMy blog is available at zehrahblog.wordpress.com.See when I've last been active atStrayers.

In some ways, the server is little more than a relay. It's far better than it used to be, but still is far from perfect. Ideally the server would actually have a complete game state (meaning, it would know where tanks are, where shots are, how physics are going to behave, etc) so that it could make intelligent decisions and determine if a client is sending bogus updates.

"In addition to knowing the secrets of the Universe, I can assure you that I am also quite potty trained." -Koenma (Yu Yu Hakusho)